<security-domain name="SecurityDomain">
                    <authentication>
                        <login-module code="LdapExtended" flag="required">
                            <module-option name="java.naming.provider.url" value="ldap://192.168.1.1:389"/>
                            <module-option name="java.naming.factory.initial" value="com.sun.jndi.ldap.LdapCtxFactory"/>
                            <module-option name="throwValidateError" value="true"/>
                            <module-option name="bindDN" value="CN=имя,OU=Отдел,DC=domain,DC=RU"/>
                            <module-option name="bindCredential" value="pass"/>
                            <module-option name="baseCtxDN" value="OU=Отдел,DC=domain,DC=RU"/>
                            <module-option name="rolesCtxDN" value="OU=Группы,OU=Отдел,DC=domain,DC=RU"/>
                            <module-option name="baseFilter" value="(sAMAccountName={0})"/>
                            <module-option name="roleFilter" value="(member={1})"/>
                            <module-option name="roleAttributeID" value="Администратор БД"/>
                            <module-option name="roleNameAttributeID" value="Администратор БД"/>
                            <module-option name="roleRecursion" value="0"/>
                        </login-module>
                    </authentication>
                </security-domain>